CVE-2014-3230

🗓️ 28 Jan 2020 15:05:37Reported by redhatType

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the environment variables

Reporter	Title	Published	Views	Family All 34
AlpineLinux	CVE-2014-3230	28 Jan 202015:05	–	alpinelinux
Cvelist	CVE-2014-3230	28 Jan 202015:05	–	cvelist
Debian CVE	CVE-2014-3230	28 Jan 202015:05	–	debiancve
EUVD	EUVD-2014-3246	7 Oct 202500:30	–	euvd
F5 Networks	K34144932: libwww-perl vulnerability CVE-2014-3230	21 Feb 202317:59	–	f5
F5 Networks	SOL34144932 - libwww-perl vulnerability CVE-2014-3230	14 Jan 201600:00	–	f5
Fedora	[SECURITY] Fedora 19 Update: perl-LWP-Protocol-https-6.04-2.fc19	23 May 201418:55	–	fedora
Fedora	[SECURITY] Fedora 20 Update: perl-LWP-Protocol-https-6.04-4.fc20	21 May 201423:23	–	fedora
Tenable Nessus	Fedora 20 : perl-LWP-Protocol-https-6.04-4.fc20 (2014-6303)	22 May 201400:00	–	nessus
Tenable Nessus	Fedora 19 : perl-LWP-Protocol-https-6.04-2.fc19 (2014-6369)	25 May 201400:00	–	nessus

NVD

Vulners

Node

lwp::protocol::https_project lwp::protocol::httpsRange6.04–6.06

[
  {
    "product": "LWP::Protocol::https",
    "vendor": "libwww-perl",
    "versions": [
      {
        "status": "affected",
        "version": "6.04 through 6.06"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2014/05/04/1
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
openwall	www.openwall.com/lists/oss-security/2014/05/02/8
openwall	www.openwall.com/lists/oss-security/2014/05/06/8
github	www.github.com/libwww-perl/lwp-protocol-https/pull/14

21 Nov 2024 02:07Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 3.15.9

EPSS0.0065

CWE-295